159 matches found
SUSE CVE-2010-1210
intl/uconv/util/nsUnicodeDecodeHelper.cpp in Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 inserts a U+FFFD sequence into text in certain circumstances involving undefined positions, which might make it easier for remote attackers to conduct cross-site scripting XSS attacks via crafte...
SUSE CVE-2011-1210
unknown...
CVE-2022-1210 affecting package libtiff for versions less than 4.4.0-1
CVE-2022-1210 affecting package libtiff for versions less than 4.4.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-1210
A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicious file leads to a denial of service. The attack can be launched remotely but requires user interaction. The exploit has been disclosed to the...
AZL-9302 CVE-2022-1210 affecting package libtiff for versions less than 4.4.0-1
A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicious file leads to a denial of service. The attack can be launched remotely but requires user interaction. The exploit has been disclosed to the...
CVE-2022-1210
CVE-2022-1210 affects LibTIFF 4.3.0, specifically the TIFF File Handler in tiff2ps. Opening a malicious TIFF can cause a denial of service; the vulnerability is remotely exploitable but requires user interaction. The exploit has been disclosed publicly. The connected documents confirm the affecte...
CVE-2022-1210 LibTIFF tiff2ps resource consumption
A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicious file leads to a denial of service. The attack can be launched remotely but requires user interaction. The exploit has been disclosed to the...
Mageia: Security Advisory (MGASA-2015-0062)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Validation Bypass
Mozilla Firefox is vulnerable to validaiton bypass. does not properly handle overlong UTF-8 encoding, which makes it easier for remote attackers to bypass cross-site scripting XSS protection mechanisms via a crafted string, a different vulnerability than CVE-2010-1210...
SUSE: Security Advisory (SUSE-SU-2021:1210-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-1210
CVE-2021-1210 affects Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The issue stems from multiple input-validation flaws in the web-based management interface, allowing an authenticated attacker with administrator credentials to execute arbitrary code as root or cause a device r...
Microsoft Sharepoint Remote Code Execution (CVE-2020-1210)
A remote code execution vulnerability exists in Microsoft Sharepoint. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
D-Link DGS-1210-28 Denial of Service Vulnerability
The D-Link DGS-1210-28 is a switch. A denial of service vulnerability exists in the D-Link DGS-1210-28, which arises from a network system or product that does not properly validate incoming data, and can be exploited by an attacker to cause a denial of service condition that denies service to a...
D-Link DGS-1210-28 Denial Of Service Exploit
Exploit Title: D-Link DGS-1210-28 Denial of Service Exploit Author: Saeed Reza Zamanian Product : D-Link DGS-1210-28 Vendor Homepage: https://www.dlink.com/ Product Link: https://www.dlink.com/en/products/dgs-1210-28-28-port-gigabit-smart-managed-switch Version : DGS-1210-28 Description : Device...
D-Link DGS-1210-28 Denial Of Service
Exploit Title: D-Link DGS-1210-28 Denial of Service Date: 18 Sep 2020 Exploit Author: Saeed Reza Zamanian Product : D-Link DGS-1210-28 Vendor Homepage: https://www.dlink.com/ Product Link: https://www.dlink.com/en/products/dgs-1210-28-28-port-gigabit-smart-managed-switch Version : DGS-1210-28...
CVE-2020-1210 Microsoft SharePoint Remote Code Execution Vulnerability
...
CVE-2020-1210
CVE-2020-1210 affects Microsoft SharePoint. A remote code execution flaw arises when SharePoint fails to validate the source markup of an application package; an attacker must have a user upload a crafted SharePoint app package to an affected SharePoint version. The impact is arbitrary code execu...
Microsoft's Patch Tuesday Packed with Critical RCE Bugs
Microsoft has released patches for 129 security bugs in its September Patch Tuesday update. These include 23 critical flaws, 105 that are important in severity and one moderate bug. Fortunately, none are publicly known or under active exploitation, Microsoft said. The most severe issue in the bun...
Description of the security update for SharePoint Server 2019: September 8, 2020
None None...
openSUSE: Security Advisory for hylafax+ (openSUSE-SU-2020:1210-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...